Search vulnerabilities

Results 209

Export CSV
CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87101

Sensitive Information Disclosure via Improper Token Validation in Acronis Cyber Protect 17

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87100

Missing Binary Hardening Causes Protection Mechanism Failure in Acronis Linux Executables

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

CVSS 3.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87099

Cross‑Site Scripting in Acronis Cyber Protect 17 Due to Improper Input Validation

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87098

Improper Authorization Leads to Sensitive Information Disclosure in Acronis Cyber Protect

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87097

Sensitive Information Disclosure via Insufficient Credential Protection in Acronis Cyber Protect 17

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87096

Acronis Cyber Infrastructure Authorization Flaw Enables Sensitive Data Access

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87095

Improper Authorization Exposes Sensitive Data in Acronis Cyber Infrastructure

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

CVSS 3.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87880

Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87878

Executable Stack Enabled in Acronis Cyber Protect Linux Binaries

Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87103

Improper Token Validation Exposes Sensitive Information in Acronis Cyber Protect

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87102

Improper Token Validation Enables Sensitive Information Disclosure in Acronis Cyber Protect 17

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

CVSS 3.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
CVE-2025-30414

Local privilege escalation via improper authentication in Acronis Cyber Protect products

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-87886

Local Privilege Escalation via Insecure File Permissions in Acronis Backup Plugins

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Listed
Vendors
CVE-2026-50033

DLL Hijacking Vulnerability in Acronis DeviceLock DLP Enables Local Privilege Escalation

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-44682

DLL Hijacking Leading to Local Privilege Escalation in Acronis DeviceLock DLP

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-42061

Local Privilege Escalation via Over‑Permissioned Child Processes in Acronis DeviceLock DLP

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-44609

Local Privilege Escalation via EXE Hijacking in Acronis DeviceLock DLP

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-25852

DLL Hijacking Exploitation Allows Local Privilege Escalation in Acronis DeviceLock DLP

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.

CVSS 3.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors